Method, automation station and method for operating an automation station

Abstract

The invention relates to a method for restoring license keys (PK1,...,PK10) in a modularly constructed automation station (100) comprising a main unit (IM) with a backplane bus connection and a plurality of modules (M1,...,M6), each also with a backplane bus connection, wherein the modules (M1,...,M6) or the main unit (IM) communicate with each other via a backplane bus (RB) using their respective backplane bus connections, wherein the modules (M1,...,M6) are operated using a license key (PK1,...,PK10) and a software-based functionality (F1,...) linked to the respective license key (PK1,...,PK10) is activated.,F10) to provide, wherein after replacing a module (M3) with a replacement module (EM), the license key (PK1,PK2,PK3) is restored by an automated reading of three data blocks (1,2,3) even if only two of the three data blocks (1,2,3) could be read and the license key (PK3) for the software-based functionality (F3) of the replaced module (M3) is assigned to the replacement module (EM) and thus the software-based functionality (F1) in the replacement module (EM) is activated.

Description

[0001] The invention relates to a method for restoring license keys in a modularly constructed automation station comprising a main unit with a backplane bus connection and a plurality of modules also with a backplane bus connection, wherein the modules or the main unit communicate with each other with the respective backplane bus connection via a backplane bus, wherein the modules are operated on the basis of a license key to provide a software-based functionality linked to the respective license key, wherein after replacing a module with a replacement module in which the software-based functionality is not yet activated, a restoration step is carried out.

[0002] The invention also relates to an automation station, designed for modular construction from a main unit with a backplane connection and a plurality of modules, each also with a backplane bus connection, wherein the modules or the main unit with their respective backplane bus connections are arranged on a backplane bus, wherein the modules are designed to provide a software-based functionality linked to the respective license key using a license key.

[0003] Furthermore, the invention relates to an engineering station which is designed to configure and parameterize an automation station with a main unit and modules and is designed to generate key data for license keys which activate a software-based functionality of a module linked to the respective license key.

[0004] For the purposes of the invention, software-based functionality linked to a respective license key is defined as follows: Different functions of one and the same software can be individually activated using different license keys. Basic functions can even be enabled without a license key at all. By using different function-linked license keys, manufacturers can combine many functions in one product and activate them in finely staggered steps, depending on customer needs, even at a later date for a fee.

[0005] If such license keys are used in automation technology, the license keys for the replacement component must be restored, preferably automatically, when a defective component is replaced, regardless of the IT infrastructure, especially in remote areas without an interrupt connection. According to the current state of the art, the restoration process for a license key is either only possible with a continuously connected IT infrastructure or, in remote areas without an IT infrastructure, only by a commissioning engineer manually connecting to the automation device via a programming device, e.g., a laptop, and supplying the replacement component with the appropriate license key to restore functionality. However, this requires an experienced employee who is trained in the use of the tools.

[0006] DE 20 2011 108152 U1 concerns a method for restoring license keys in a modular automation station.

[0007] EP 1 224 510 B1 shows a modular automation system with a backplane bus, a head module, and additional modules. Each additional module is assigned an identifier, which is transmitted to the head module for verification during or before operation. If the verification of an identifier fails, the automation system cannot be put into operation.

[0008] EP 1 653 308 A1 shows a system with a backplane bus for storing and providing component-related licensing data.

[0009] It is an object of the present invention to provide a method or an automation device which ensures that after replacing a defective automation component, the new automation component is automatically supplied with a license key.

[0010] The task is solved for the procedure for restoring license keys mentioned at the beginning by

[0011] The license key set is restored, wherein the license key set includes all license keys of the modules from the automation station. To restore the license key set, a first data block is read from a first storage location of the automation station, a second data block from a second storage location of the automation station, and a third data block from a third storage location of the automation station. The data blocks have data portions of the license key set as follows: the license key set is divided into a first part and a second part, wherein parity information is formed from the two parts, and the data portions and the parity information are distributed evenly across the data blocks.Whereby the license key set is restored based on the parity information even if only two of the three data blocks could be read and the license key for the software-based functionality of the replaced module is assigned to the replacement module, thus enabling the software-based functionality of the replacement module.

[0012] This method for restoring a license key not only creates an automated process that can be performed in remote areas, but also provides fail-safe protection. Because the first data block, second data block, and third data block are all stored in a memory cluster, not only is the data stored in a recoverable manner, but by storing it with parity data, this method also provides fail-safe protection. If, for example, a storage location is also located in a component that needs to be replaced or has burned out, the license keys can still be restored using the data blocks in the other two storage locations thanks to the distributed parity information.

[0013] When a new configuration or an extension of the system is carried out, a corresponding set of license keys for the functionalities of the stations is still coded and the corresponding data blocks with the parity data that ensure fault tolerance are generated and can be stored in different locations.

[0014] For the automation station mentioned at the beginning, the object is achieved in that a restoration means is present in the automation station, which is designed to recognize the replacement module without a valid license key after replacing a module with a replacement module in which the software-based functionality is not yet activated and then to carry out a restoration step. For this purpose, a first storage location, a second storage location and a third storage location are arranged at different physical locations on or within the automation station, wherein the restoration means is designed to restore a license key set, wherein the license key set comprises all license keys of the modules from the automation station. To restore the license key set, the restoration means is designed to retrieve a first data block from the first storage location,to read a second data block from the second storage location or a third data block from the third storage location, wherein the data blocks comprise data portions of the license key set as follows: The license key set is divided into a first part with data portions and a second part with data portions, wherein parity information is formed from the two parts and the data portions and the parity information are distributed evenly across the data blocks, wherein the license key set is restored based on the parity information even if only two of the three data blocks could be read, and the license key recovered from the license key set for the software-based functionality of the replaced module is assigned to the replacement module, thus enabling the software-based functionality in the replacement module.

[0015] Advantageously, the automation station has a fieldbus interface which is designed for connection to a higher-level automation system or to an engineering station, wherein the main unit is designed to receive and store the license key set and / or the data blocks.

[0016] Automation stations are typically configured and parameterized using an engineering system or engineering station. To ensure software-based behavior and functionality, the engineering system provides the modules, assemblies, or entire stations with license data in addition to the configuration and parameterization data. To ensure that the promise of easy module replacement can be met, it is necessary that the entire system functions in its original form after the defective parts are replaced, even if one or more modules fail. The license keys required for this are stored in a recoverable manner, as previously described.

[0017] License keys and coding for an automation system are generated using the engineering station during configuration and / or system setup. Since the tool or engineering station knows all the system's modules and licensed functionalities, the key data can be optimally distributed with parity data in at least three data blocks.

[0018] To achieve this, for the aforementioned method for operating an engineering station, a database is queried in the engineering station, and information about the configuration and the affiliation of the licensed functionalities to the modules is obtained from the database. This information is used to create a license key set, which includes all license keys of the modules from the automation station. For later restoration of the license key set in the automation station, the license key set is divided into data parts. The license key set is divided into a first part and a second part, with parity information being formed from the two parts, and the data parts and the parity information are distributed evenly across a first data block, a second data block, and a third data block.In a storage step, the first data block is written to a first storage location of the automation station, the second data block to a second storage location of the automation station, and the third data block to a third storage location of the automation station.

[0019] The drawing shows an embodiment of the invention, showing: FIG 1 shows an exemplary exchange process in an automation station, FIG 2 shows the division of a license key set with the formation of parity information, FIG 3 shows a memory network of three data blocks, FIG 4 shows an example of an automation station with modular modules and FIG 5 shows an engineering station for providing license keys and data blocks.

[0020] The FIG 1 From left to right, an automation station 100 is configured for modular construction, consisting of a main unit IM with a backplane bus connection and a plurality of modules M1,...,M6, each of which is also configured with a backplane bus connection. The modules M1,...,M6 or the main unit IM are arranged and configured to communicate via the backplane bus RB.

[0021] The main unit IM is also referred to as an interface module or PLC controller. For example, a first module M1 would be a first I / O module, a second module M2 would be a second I / O module, a third module M3 would be a third I / O module, and the fourth module M4 is also an I / O module. However, the fifth module M5 is an intelligent functional module, and the sixth module M6 is a server module.

[0022] Such an automation station 100 consisting of modules M1,...,M6 is planned and commissioned using, for example, an engineering station or a programming device. Some modules M1,...,M6 are defined by software, meaning their functionality depends, for example, on a license key.

[0023] The middle picture in FIG 1 indicates that a module has failed due to damage, such as a lightning strike. An error is displayed. An operator must obtain a suitable replacement part. These spare parts are located, for example, in a warehouse to which the operator has access.

[0024] The right picture in FIG 1 shows the replacement of the third module M3 with a replacement module EM. The replacement module EM is not programmed, as it comes from stock and does not yet have a license key.

[0025] According to the invention, the automation station 100 now undergoes a rebuild or recovery process in which the license keys are regenerated from parity information. The full range of functions for the replacement module EM, which replaces the third module M3, is then immediately available again.

[0026] With the FIG 2 This illustrates how parity information is generated from a data set, namely the PKS license key set. The PKS license key set contains a number of licenses, namely a first license key PK1 up to a tenth license key PK10. The PKS license key set is divided into a first part A containing the license keys PK1,...,PK5, and a second part B containing the license keys PK6,...,PK10. Parity information P1, P2, P3, P4, P5 is generated from the two parts A and B using an X-OR operation.

[0027] FIG 3 shows the balanced distribution of the data portions Da,Db and the parity information P1,P2,P3,P4 to a first data block 1, a second data block 2 and a third data block 3.

[0028] With the FIG 4 An example of an automation system 100 with a main unit IM and six modules M1,...,M6 is shown. In this illustration, the modules M1,...,M6 are arranged in base units SE1,...,SE6. Such base units SE1,...,SE6 are also called terminal units, into which modules can be plugged.

[0029] The main unit IM has a recovery means WH which is designed, after replacing a module M3 (see FIG 1 ) with a replacement EM module. The license for this replacement EM module must be restored.

[0030] Using an engineering station 201 (see FIG 4 ) the following configurations were assigned to the automation station 100. The first module M1 receives functionality F1 with the first license key PK1, the second module M2 receives functionality F2 with the second license key PK2, the third module M3 receives functionality F3 with the third license key PK3, and the fourth module M4 receives a fourth functionality F4 with the fourth license key PK4. Since the modules M1,...,M4 are similar I / O modules, only one license key PK1, PK2, PK3 is required for each of their functions. The modules M5 and M7 are smart function modules or server modules, which require multiple license keys. For this purpose, the fifth module M5, as a smart function module, has a fifth license key PK5 for a fifth functionality, a sixth license key PK6 for a sixth functionality, and a seventh license key PK7 for a seventh functionality.The sixth module M6, as a server module, also requires three additional license keys PK8, PK9, PK10, which accordingly provide an eighth functionality F8, a ninth functionality F9 and a tenth functionality F10.

[0031] To also provide fail-safe operation, the three data blocks 1, 2, 3 are stored at different locations 01, 02, 03 in the automation system 100. The first automation module M1, with the first base unit SE1, provides a first location O1 for storage in the first storage location S1. The third module M3, with the third base unit SE3, provides a second location E2 for a second storage location S2 for the second data block 2, and the fifth module M5, with its fifth base unit SE5, provides a third location O3 for a third storage location S3 for the third data block 3.If the first module M1 and its socket unit SE1 are destroyed by lightning, the entire license key set PKS can be restored using the restoration tool WH based on the parity information from the second data block 2 in the second storage location S2 and the third data block 3 in the third storage location S3, and the first license key PK1 for the first function F1 for the replacement module EM can be restored from the license key set PKS.

[0032] The FIG 5shows the aforementioned engineering station 201, which is designed to configure and parameterize the automation station 100 with the main unit IM and the modules M1,...,M6. A commissioning engineer (IBS) has access to a keyboard T and a monitor M for configuration at the engineering station 201. Additionally, the engineering station 201 is designed to generate key data for the license keys PK1,...,PK10. The license keys PK1,...,PK10 guarantee that a software-based functionality F1,...,F10 is enabled on the modules M1,...,M6.

[0033] In engineering station 201, a Config database is queried using an allocation tool Z, and information about the configuration and the assignment of the licensed functionalities F1,...,F10 to the modules M1,...,M6 is obtained from the Config database. This information is used to provide a PKS license key set. The PKS license key set contains all PK1,...,PK10 license keys of the modules M1,...,M6 from automation station 100. For later restoration of the PKS license key set in automation station 100, the PKS license key set is broken down into data portions Da,Db. The PKS license key set is divided into a first portion A and a second portion B, with parity information P1,P2,P3,P4 being formed from the two portions A,B.The data portions Da,Db and the parity information P1,P2,P3,P4 are distributed in a balanced manner from a first data block 1, a second data block 2 and a third data block 3.

[0034] In a storage step D or a download process, the first data block 1 is written to a first storage location S1 of the automation station 100. The second data block 2 is written to a second storage location S2, and the third data block 3 is written to a third storage location S3.

Claims

1. Method for restoring license keys (PK1,...,PK10) in a modular automation station (100) comprising a main unit (IM) with a backplane bus connection and a plurality of modules (M1,...,M6) similarly with a backplane bus connection, wherein the modules (M1,...,M6) or the main unit (IM) with the respective backplane bus connection communicate with one another via a backplane bus (RB), wherein the modules (M1,...,M6) are operated by means of a license key (PK1,...,PK10) to provide a software-based functionality (F1,...,F10) tied to the respective license key (PK1,...,PK10), wherein after a module (M3) is replaced with a replacement module (EM), in which the software-based functionality (F3) is not yet enabled, a restoration step is carried out, characterised in that a license key set (PKS) is restored, wherein the license key set (PKS) comprises all license keys (PK1,...,PK10) of the modules (M1,...,M6) of the automation station (100), for restoring the license key set (PKS), a first data block (1) is read from a first storage location (S1) of the automation station (100), a second data block (2) is read from a second storage location (S1) of the automation station (100) and a third data block (3) is read from a third storage location (S1) of the automation station (100), wherein the data blocks (1,2,3) comprise data portions (Da,Db) of the license key set (PKS) as follows, the license key set (PKS) is divided into a first part (A) and a second part (B), wherein parity information (P1,P2,P3,P4) is formed from the two parts (A,B) and the data portions (Da,Db) and the parity information (P1,P2,P3,P4) are distributed in a balanced manner over the data blocks (1,2,3), wherein the license key set (PKS) is restored on the basis of the parity information even if only two of the three data blocks (1,2,3) could be read and the license key (PK3) for the software-based functionality (F3) of the replaced module (M3) is assigned to the replacement module (EM) and thus the software-based functionality (F1) is enabled for the replacement module (EM).

2. Automation station (100) designed for modular construction from a main unit (IM) with a backplane bus connection and a plurality of modules (M1,...,M6) each similarly with a backplane bus connection, wherein the modules (M1,...,M6) or the main unit (IM) with the respective backplane bus connection are arranged on a backplane bus (RB), wherein the modules (M1,...,M6) are designed by means of a license key (PK1,...,PK10) to provide a software-based functionality (F1,...,F10) tied to the respective license key (PK1,...,PK10), characterised by a restoring means (WH) which is designed, after a module (M3) has been replaced by a replacement module (EM), for which the software-based functionality (F3) has not yet been enabled, to recognise the replacement module (EM) without a valid license key (PK1,...,PK10) and then to run through a restoration step, for which purpose a first storage location (S1), a second storage location (S1) and a third storage location (S1) are arranged at different physical locations (01,02,03) on or within the automation station (100), wherein the restoring means (WH) is designed to restore a license key set (PKS), wherein the license key set (PKS) comprises all license keys (PK1,...,PK10) of the modules (M1,...,M6) of the automation station (100), for restoring the license key set (PKS) the restoring means (WH) is designed to read a first data block (1) from the first storage location (S1), a second data block (2) from the second storage location (S1) or a third data block (3) from the third storage location, wherein the data blocks (1,2,3) comprise data portions (Da,Db) of the license key set (PKS) as follows: the license key set (PKS) is divided into a first part (A) and a second part (B), wherein parity information (P1,P2,P3,P4) is formed from the two parts (A,B) and the data portions (Da,Db) and the parity information (P1,P2,P3,P4) are distributed in a balanced manner over the data blocks (1,2,3), wherein the license key set (PKS) can be restored on the basis of the parity information even if only two of the three data blocks (1,2,3) could be read and the license key (PK3) for the software-based functionality (F3) of the replaced module (M3) retrieved from the license key set (PKS) is assigned to the replacement module (EM) and thus the software-based functionality (F1) is enabled in the replacement module (EM).

3. Automation station (100) according to claim 2, having a field bus interface (101) designed for connection to a higher-level automation system (200) or an engineering station (201), wherein the main unit (IM) is designed to receive and store the license key set (PKS) and / or the data blocks (1,2,3).

4. Method for operating an engineering station (201), which is designed to configure and parameterise an automation station (100) with a main unit (IM) and modules (M1,...,M6) and is designed to generate key data for license keys (PK1,...,PK10), which enable a software-based functionality (F1,...,F10) of a module (M1,...,M6) tied to the respective license key (PK1,...,PK10), wherein in the engineering station (201) a database (Config) is queried and from the database (Config) the information about the configuration and the affiliation of the licensed functionalities (F1,...,F10) to the modules (M1,...,M6) is obtained, wherein with this information a license key set (PKS) is created, wherein the license key set (PKS) comprises all license keys (PK1,...,PK10) of the modules (M1,...,M6) of the automation station (100), for a later restoration of the license key set (PKS) in the automation station (100) the license key set (PKS) is divided into data portions (Da,Db), the license key set (PKS) is divided into a first part (A) and a second part (B), wherein parity information (P1,P2,P3,P4) is formed from the two parts (A,B) and the data portions (Da,Db) and the parity information (P1,P2,P3,P4) are distributed in a balanced manner over a first data block (1), a second data block (2) and a third data block (3), and in a storage step (D), the first data block (1) is written to a first storage location (S1) of the automation station (100), the second data block (2) is written to a second storage location (S2) of the automation station (100) and the third data block (3) is written to a third storage location (S3) of the automation station (100).

Images